Issues with Existing Cryptographic Protection Methods for Routing Protocols

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 21
Abstract: Routing protocols have been extended over time to use cryptographic mechanisms to ensure that data received from a neighboring router has not been modified in transit and actually originated from an authorized neighboring router. The cryptographic mechanisms defined to date and described in this document rely on a digest produced with a hash algorithm applied to the payload encapsulated in the routing protocol packet. This document outlines some of the limitations of the current mechanism, problems with manual keying of these cryptographic algorithms, and possible vectors for the exploitation of these limitations. This document is not an Internet Standards Track specification; it is published for informational purposes.
Publication Date: 2010-10-01
Status Note: Informational
DOI: 10.17487/RFC6039
Link: https://doi.org/10.17487/RFC6039
Author(s): Vishwas Manral
Manav Bhatia
Joel Jaeggli
Russ White

Latest version of IETF RFC 6039

Document Versions — IETF RFC 6039

▶ IETF RFC 6039 (2010-10-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 793 [Superseded*]
IETF RFC 1195 [Active*]
IETF RFC 2328 [Active*]
IETF RFC 2385 [Superseded*]
IETF RFC 2453 [Active*]
IETF RFC 4271 [Active*]
IETF RFC 4302 [Active*]
IETF RFC 4303 [Active*]
IETF RFC 4552 [Active*]
IETF RFC 4822 [Active*]
IETF RFC 5304 [Active*]
IETF RFC 5310 [Active*]
IETF RFC 5340 [Active*]

Bibliographic Reference(s)

Wang, X., et al., "Collisions for Hash Functions MD4, MD5, HAVAL-128 and RIPEMD", August 2004, IACR ePrint Archive, http://eprint.iacr.org/2004/199 . EXTERNAL
"NIST's Policy on Hash Functions", 2006, http://csrc.nist.gov/groups/ST/hash/policy.html . EXTERNAL
Rechberger, C. and V. Rijmen, "On Authentication with HMAC and Non-random Properties", Financial Cryptography and Data Security, Lecture Notes in Computer Science, Volume 4886/2008, Springer-Verlag, Berlin, December 2007. EXTERNAL
Wang, X., et al., "Finding Collisions in the Full SHA-1", Proceedings of Crypto 2005, Lecture Notes in Computer Science, Volume 3621, pp. 17-36, Springer- Verlag, Berlin, August 31, 2005. EXTERNAL
Bhatia, M. and V. Manral, "BFD Generic Cryptographic Authentication", Work in Progress, June 2010. EXTERNAL
Praveen Gauravaram, et al., "Collision Attacks on MD5 and SHA-1: Is this the 'Sword of Domocles' for Electronic Commerce?", Information Security Institue (ISI), Queensland University of Technology (QUT), Australia. EXTERNAL
Rechberger, C. and V. Rijmen, "New Results on NMAC/HMAC when Instantiated with Popular Hash Functions", Journal of Universal Computer Science, Volume 14, Number 3, pp. 347-376, 1 February 2008. EXTERNAL
Arjen K. Lenstra, "Further progress in Hashing cryptanalysis", Lucent Bell Laboratories, February 26, 2005. EXTERNAL
Praveen Gauravaram, et al., "Some thoughts on Collision Attacks in the Hash Functions Md5, SHA-0 and SHA-1", Information Security Institue (ISI), Queensland University of Technology (QUT), Australia. EXTERNAL
Convery, et al., "BGP Vulnerability Testing: Separating Fact from FUD v1.00", NANOG 28, pp. 1-61, June 2003. EXTERNAL
Philip Hawkes, Michael Paddon, and Gregory G. Rose, "On Corrective Patterns for the SHA-2 Family", IACR ePrint Archive, 2004, http://eprint.iacr.org/2004/207 . EXTERNAL
Watson, P., "Slipping in the Window: TCP Reset attacks", Presentation at 2004 CanSecWest, http://cansecwest.com/csw04archive.html . EXTERNAL
Xiaoyun Wang, Xuejia Lai, Dengguo Feng, and Hongbo Yu, "Collisions for hash functions MD4, MD5, HAVAL-128, and RIPEMD", Crypto 2004 Rump Session. EXTERNAL
Dobbertin, H., "Cryptanalysis of MD5 Compress", Technical Report, 2 May 1996. (Presented at the Rump Session of EuroCrypt 1996.) EXTERNAL
IETF RFC 1058 [Active*]
IETF RFC 1321 [Active*]
IETF RFC 1388 [Superseded*]
IETF RFC 1723 [Superseded*]
IETF RFC 1923 [Active*]
IETF RFC 2082 [Superseded*]
IETF RFC 2104 [Active, Amended*]
IETF RFC 2154 [Active*]
IETF RFC 2410 [Active*]
IETF RFC 3562 [Active*]
IETF RFC 4270 [Active*]
IETF RFC 4306 [Superseded*]
IETF RFC 5709 [Active*]
IETF RFC 5880 [Active*]
IETF RFC 5881 [Active*]
IETF RFC 5883 [Active*]
IETF RFC 5925 [Active*]
RSA.crypto.v2n2.1996 — Dobb EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6039.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 6039, Issues with Existing Cryptographic Protection Methods for Routing Protocols. Available at https://doi.org/10.17487/RFC6039

Snippet:

IETF RFC 6039, Issues with Existing Cryptographic Protection Methods for Routing Protocols. Available at https://doi.org/10.17487/RFC6039

HTML (ISO 690 compliant)

Preview:

IETF RFC 6039, Issues with Existing Cryptographic Protection Methods for Routing Protocols. Available at https://doi.org/10.17487/RFC6039

Snippet:

<span class="citation"><cite>IETF RFC 6039</cite>, Issues with Existing Cryptographic Protection Methods for Routing Protocols. Available at <a href="https://doi.org/10.17487/RFC6039" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6039</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 6039, Issues with Existing Cryptographic Protection Methods for Routing Protocols
doi: 10.17487/RFC6039
url: https://doi.org/10.17487/RFC6039

Snippet:

<li>
<cite id="bib-rfc6039">IETF RFC 6039</cite>, Issues with Existing Cryptographic Protection Methods for Routing Protocols
<span class="doi">10.17487/RFC6039</span>
</li>

Referenced By

IETF RFC 6506 [Superseded*]
IETF RFC 6518 [Active*]
IETF RFC 6862 [Active*]
IETF RFC 6863 [Active*]
IETF RFC 6952 [Active*]
IETF RFC 7166 [Active*]
IETF RFC 7474 [Active*]